General
- Target 2026-07-31_71ca49603891ce3d255d7d814c80367a_coinminer_drokbk_elex_rhadamanthys_smoke-loader_stealc_stop_tofsee
- Size 512KB
- Sample260731-rmlbrawshw
- SHA256 76cc7292de4490ef792e4ab9016b14fbf5bd0d01d5ce47a233d6a1f0016ea2cd
- MD5 71ca49603891ce3d255d7d814c80367a
- SHA1 2f6454024a0408f5eb04bac89b9861c5cea7e942
- SHA512 77b868559d0c7fab322d87f7560523fef272b404f3ce11d47ba7fe3e51e6e80007609d4fbf78687138addfa70abdd89a85364131679026ad84771f60264d6674
- SSDEEP 12288:/bE+u9h1Lk70TnvjcsMxdABSnLHOr2fqRVnRjV:/Y+ik70Trc18BSnLW2CRBb
- TLSH T18BB4022071C0C0B7D4BB113544E9CB369A76307247B9D5DBBAED67BA6E202E1A3352CD
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Behavioral task
behavioral1
Sample
2026-07-31_71ca49603891ce3d255d7d814c80367a_coinminer_drokbk_elex_rhadamanthys_smoke-loader_stealc_stop_tofsee.exe
Resource
win10v2004-20260513-en
4 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-07-31_71ca49603891ce3d255d7d814c80367a_coinminer_drokbk_elex_rhadamanthys_smoke-loader_stealc_stop_tofsee.exe
Resource
win11ltsc2024-20260709-en
4 signatures
150 seconds
Malware Config
Extracted
Family
-
snojan
C2
-
http://wecan.hasthe.technology/upload
Targets
-
- Target 2026-07-31_71ca49603891ce3d255d7d814c80367a_coinminer_drokbk_elex_rhadamanthys_smoke-loader_stealc_stop_tofsee
- Size 512KB
- SHA256 76cc7292de4490ef792e4ab9016b14fbf5bd0d01d5ce47a233d6a1f0016ea2cd
- MD5 71ca49603891ce3d255d7d814c80367a
- SHA1 2f6454024a0408f5eb04bac89b9861c5cea7e942
- SHA512 77b868559d0c7fab322d87f7560523fef272b404f3ce11d47ba7fe3e51e6e80007609d4fbf78687138addfa70abdd89a85364131679026ad84771f60264d6674
- SSDEEP 12288:/bE+u9h1Lk70TnvjcsMxdABSnLHOr2fqRVnRjV:/Y+ik70Trc18BSnLW2CRBb
- TLSH T18BB4022071C0C0B7D4BB113544E9CB369A76307247B9D5DBBAED67BA6E202E1A3352CD
- MD5 SHA1 SHA512 SSDEEP TLSH
Score10/10-
UPX dump on OEP (original entry point)